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AMENDMENTS TO THE CLAIMS 

Please amend the claims as follows: 
Listing of Claims: 

Claim 1 (Currently Amended): A tag privacy protection method for preventing 
privacy information of a user from being acquired from information which is delivered from 
a tag device, in which a confid e ntial value corr e sponding to e ach tag ID information is stor e d 
in a confidential valu e memory of e ach tag d e vic e ; comprising! the st e p s of 

the tag d e vic e 

delivering tag output information from an output section of the tag device, the tag 
output information whjeh-correspondmgs to a confidential value stored in the-a_confidential 
value memory of the tag device, the confidential value being a mapping of tag ID 
information from an output section of t he each tag -4eviee ; 

and 

-reading out the confidential value or at least part of elements thereof ef4he 
confidential value from the confidential value memory, applying thereto a first function to the 
confidential value or the elements thereof to generate a new confidential value , an inverse 
image of the first function whieh being is difficult to obtain, and updating the confidential 
value in the confidential value memory with a r e sult of the new confidential value sueh 
calculation by overwriting in a first calculator of the tag device, the new confidential value 
differing from the confidential value, and both the new confidential value and the confidential 
value corresponding to the identical tag ID information . 

Claim 2 (Currently Amended): A tag privacy protection method according to Claim 
1 . further comprising: 
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in which a second calculator of th e tag d e vic e readings out the confidential value 
from the confidential value memory^ and appl ying ies a second function F2 which disturbs a 
relationship between elements of a definition domain and a mapping thereof to the 
confidential value read out in a second calculator of the tag device; wherein ^-and 

the tag output information is a result of such calculation i s th e tag output information . 

Claim 3 (Original): A tag privacy protection method according to Claim 2 in which at 
least one of the first function Fl and the second function F2 is a hash function. 

Claim 4 (Original): A tag privacy protection method according to Claim 2 in which 
the first function Fl is a hash function H(x)=hash(p | x) where hash represents a hash function 
for {0, 1 }*-» {0, 1 } r , p e {0, 1 } s and r and s are natural numbers and in which the second 
function F2 is a hash function G(x)=hash(q | x) where q G {0, 1 } s for p 9^. 

Claim 5 (Original): A tag privacy protection method according to Claim 2 in which 
the first function Fl is a hash function H(x)=hash(pad(x, p)) where hash represents a hash 
function for {0, 1 }*-* {0, 1 } r , pG {0, 1 } s , pad(x, p) represents a padding of p to x and r and s 
are natural numbers and in which the second function F2 is a hash function G(x)=hash(pad(x, 
q)) where pad(x, q) represents a padding of q to x and q e {0, 1 } s for p ^ q. 

Claim 6 (Original): A tag privacy protection method according to Claim 2 where the 
first function Fl is a hash function H(x) for {0, 1 }*-* {0, 1 } r and r is a natural number and in 
which the second function F2 is a hash function G(x)=F(rx) where rx represents a bit 
inversion of x. 
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Claim 7 (Original): A tag privacy protection method according to Claim 2 in which at 
least one of the first function Fl and the second function F2 is a common key encryption 
function. 

Claim 8 (Original): A tag privacy protection method according to Claim 2 in which 
the first function Fl and the second function F2 are an identical common key encryption 
function, to which different common keys are applied. 

Claim 9 (Currently Amended): A tag privacy protection method for preventing 
privacy information of a user from being acquired from information which is delivered from 
a tag device, in which a first confidential value Sk, i corresponding to each tag ID information 
id k is stored in a confidential value memory of each tag device k where fk e { 1 , . . ., m}^ and 
wh e r e m represents a total number of tag devices^) and in which each tag ID information id n 
(n€ {1, m} and a corresponding second confidential value s n> i are stored in a database 
memory of a backend apparatus in a manner relating to each other; comprising: the steps of 

th e tag d e vic e 

reading out the first confidential value s k , i from the confidential value memory, and 
applying a second function F2 which disturbs a relationship between elements of a definition 
domain and a mapping thereof to generate tag output information F2(s k> j) in a second 
calculator of the tag device ; 

delivering the tag output information F2(s k> j) from an output section of the tag device ; 

and reading out the first confidential value s k , \ from the confidential value memory, 
applying thereto a first function Fl, an inverse image of which is difficult to obtain, and 
saving a result of such calculation Fl(s k , i) as new first confidential value s ki j+i in the 
confidential value memory by overwriting in a first calculator of the tag device ; 
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th e back e nd apparatus 

accepting an input of the tag output information F2(s k , 0 at an input section of the 
backend apparatus ; 

reading out the second confidential value s n , i from the database memory, applying to 
each second confidential value s n , i read out j times where (j G {0, . . jmax}*) the first function 
Fl and subsequently applying the second function F2 thereto in a third calculator of the 
backend apparatus ; 

comparing the tag output information F2(s k , 0 against the result of calculation 
F2(Fl j (s n , i)) in a comparator of the backend apparatus ; 

in the event the tag output information F2(s k> 0 does not match the result of calculation 
F2(Fl j (s n , the processings in the third calculator and the comparator being executed again 
by changing the value of at least one of n and j; 

and extracting by a reader of the backend apparatus the tag ID information id n which 
is related to the second confidential value s n , i corresponding to the matched result of 
calculation F2(Fl j (s n , 0) from the database memory when the tag output information F2(s k , j) 
matches the result of calculation F2(Fl J (s n , 0). 

Claim 10 (Currently Amended): A tag privacy protection method for preventing 
privacy information of a user from being acquired from information which is delivered from 
a tag device, in which a first confidential value s k , \ and a first proper value w k corresponding 
to each tag ID information id k are sored in a confidential value memory of each tag device k 

m), where ke_ (l mi and m represents a total number of tag devices,,) in a 

manner relating to each other and in which each tag ID information id n (n <E { 1 , . . m}) and a 
corresponding second confidential value s n> i and a second proper value w n are stored in a 
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database memory of a backend apparatus in a manner relating to each other; comprising:4he 
st e ps of 

th e tag d e vice 

reading out the first confidential value s k> i from the confidential value memory and 
applying thereto a second function F2 which disturbs a relationship between elements of a 
definition domain and a mapping thereof -to generate tag output information F2(s k , 0 in a 
second calculator of the tag device ; 

delivering the tag output information F2(s k , i) from an output section of the tag device ; 

reading out the first confidential value s k , i and the first proper value w k from the 
confidential value memory, applying a first function Fl, an inverse image of which is 
difficult to obtain, to a bit combination value of the first confidential value and the first 
proper value, and saving a result of such calculation Fl(s k , i | w k ) as a new confidential value 
s k ,i+i in the confidential value memory by overwriting in a first calculator of the tag device ; 

the back e nd apparatu s 

accepting an input of the tag output information F2(s k , 0 by an input section of the 
backend apparatus ; 

reading out the second confidential value s n , i and the second proper value w n from the 
database memory of the backend apparatus , and applying the second function F2 to I J (n) 
where I J (n)=s n , , (j=0) and I J (n)=Fl(I J_1 (n)) | id„) (j a) to calculate F2(I J (n)) in a third 
calculator of the backend apparatus ; 

comparing the tag ID information F2(s k , 0 and a result of calculation F2(I J (n)) in the 
third calculator in a comparator of the backend apparatus ; 

in the event the tag output information F2(s ki 0 does not match the result of calculation 
F2(I j (n)), the processings in the third calculator and the comparator being executed again by 
changing the value of at least one of n and j; 
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and in the event the tag output information F2(Sk, i) matches the result of calculation 
F2(I J (n)), extracting the tag ID information id n which is related to the second confidential 
value s n , i and the second proper value w n corresponding to the matching result of calculation 
F2(I j (n)) from the database memory by a reader. 

Claim 1 1 (Currently Amended): A tag privacy protection method for preventing 
privacy information of a user from being acquiring from information which is delivered from 
a tag device, in which a first confidential value s k , i and a first proper value w k which 
correspond to each tag ID information id k are stored in a confidential value memory of each 
tag device k (kc (1, m) , where ke^ lh . ml and m represents a total number of tag 
devices^) and in which a tag ID information id n (ne {1, .. m}) and a second confidential 
value s nt i and a second proper value w n which correspond thereto are stored in a database 
memory of a backend apparatus in a manner relating to each other; comprising! th e st e ps of 

the tag device 

reading out the first confidential value s k , i and the first proper value w k from the 
confidential value memory and applying to a bit combination value thereof a second function 
F2 which disturbs a relationship between elements of a definition domain and a mapping 
thereof to generate tag output information F2(s k , j | w k ) in a second calculator of the tag 
device ; 

delivering the tag output information F2(s k) j | w k ) from an output section of the tag 

device ; 

and-reading out the first confidential value s k , i from the confidential value memory, 
applying a first function Fl, an inverse image of which is difficult to obtain, to the first 
confidential value s ki j which is read out, and saving a result of such calculation Fl(s k , j) as a 
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new first confidential value s k , i in the confidential value memory by overwriting in a first 
cal cul ator of the tag device ; 

th e back e nd apparatus 

accepting the tag output information F2(s k , i | w k ) as an input at an input section of the 
backend apparatus at an input s e ction ; 

reading out the second confidential value s n , i and the second proper value w n from the 
database memory of the backend apparatus , applying j times (j e {0, . . j max }) the first 
function Fl to the second confidential value s n , i to determine a bit combination value Fl j (s n , 0 
| w n of a resulting Fl j (s n , 0 and the second proper value w n , and applying the second function 
F2 to the bit combination value Fl j (s n , 0 | w n in a third calculator of the backend apparatus ; 
and 

comparing the tag output information F2(s k , i | w k ) against a result of calculation in the 
third calculator F2(Fl J (s n , i) | w n ) in a comparato r of the backend apparatus ; 

in the event the tag output information F2(s k , i | w k ) does not match the result of 
calculation F2(Fl j (s n , 0 | w n ), executing the processings in the third calculator and the 
comparator again by changing the value of at least one of n and j; 

and in the event the tag output information F2(s k , j | w k ) matches the result of 
calculation F2(Fl j (s n , 0 | w n ), extracting the tag ID information id n which is related to the 
second confidential value s n , i and the second proper value w n corresponding to the matching 
result of calculation F2(Fl J (s n , i) | w n ) from the database memory by a reader of the backend 
apparatus . 

Claim 12 (Currently Amended): A tag privacy protection method for preventing 
privacy information of a user from being acquired from information which is delivered from 
a tag device, in which a first proper value w k corresponding to each tag ID information id k 
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and a first confidential value Sj which assumes an identical initial value si for a plurality of 
tag ID information are stored in a confidential value memory of each tag device k where 
(ke{l,..., m} , wh e re and m represents a total number of tag devices), each tag ID 
information id n (ne {1, . . ., m}) and a corresponding second proper value w n are stored in a 
database memory of a backend apparatus in a manner relating to each other, and a first result 
of calculation Sj+i obtained by applying j times (j e {0, . . ., j ma x}) a first function Fl to the 
second confidential value s\ which is used in common by the plurality of tag ID information 
is stored in a calculated value memory of the backend apparatus; comrprisingi th e s t e p s of 
th e tag d e vice 

reading out the first confidential value Sj and the first proper value Wk from the 
confidential value memory and applying to a bit combination value thereof a second function 
F2 which disturbs a relationship between elements of a definition domain and a mapping 
thereof to generate tag output information F2(sj | w k ) in a second calculato r of the tag device ; 

delivering the tag output information F2(si | Wk) from an output section of the tag 

device ; 

and-reading out the first confidential value Sj from the confidential value memory, 
applying the first function Fl, an inverse image of which is difficult to obtain, to the first 
confidential value Si which is read out, and saves a result of such calculation Fl(sO as a new 
first confidential value Sj+i in the confidential value memory by overwriting in a first 
calculato r of the tag device ; 

th e back e nd apparatus 

accepting the tag output information F2(sj | w k ) as an input at an input section of the 
backend apparatus ; 
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reading out a result of the first calculation Sj+j and the second proper value w n from 
the database memory to obtain a bit combination value Sj+i | w n thereof, and applying the 
second function F2 thereto in a third calculator of the backend apparatus ; and 

comparing the tag output information F2(Si | w k ) against a result of the calculation by 
the third calculator F2(sj+i | w n ) in a comparator of the backend apparatus ; 

in the event the tag output information F2(sj | w k ) does not match the result of the 
calculation F2(s j+ i | w n ), executing the processings in the third calculator and the comparator 
again by changing the value of at least one of n and j; 

and in the event the tag output information F2(sj | w k ) matches the result of the 
calculation F2(sj + i | w n ), extracting the tag ID information id n which is related to the second 
proper value w n corresponding to the matching result of calculation F2(Sj+i | w n ) from the 
database memory by a reader of the backend apparatus . 

Claim 13 (Currently Amended): A tag privacy protection method for preventing 
privacy information of a user from being acquired from information which is delivered from 
a tag device, in which a combination of d (d > 2) elements e U) V u (ue{l, ...,d}) 
corresponding to each tag ID information id k is stored in a confidential value memory of each 
tag device k where fk e { 1 , . . m} T andwhere m represents a total number of tag devices),, and 
in which a combination of d initial elements f u , 0 comprising one selected from each of d 
kinds (d ^2) of subgroups %(u€{l,...,d}) and the tag ID information id n of each tag device 
n (n e { 1 , . . m}) are stored in a database memory of a backend apparatus in a manner 
relating to each other; comprising: the st e ps of; 

tho tag device 

reading out the d elements e Ut vu from the confidential value memory to form a bit 
combination value thereof which represents a confidential value s k , j and applying a second 
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function F2 which disturbs a relationship between elements of a definition domain and a 
mapping thereof to the confidential value s k , i to generate tag output information a k , i=F2(s k , 0 
in a second calculator of the tag device ; 

delivering the tag output information a k , j from an output section of the tag device ; 

end-extracting at least part of elements e u -, vu « (u'g{1, ...,d}) from the confidential 
value memory, applying a first function Fl, an inverse image of which is difficult to obtain, 
to the extracted elements e u \ VU '> and saving a result of such calculation Fl(e U ', w) as new 
elements e u «, VU '+i in the confidential value memory by overwriting in a first calculator of the 
tag device ; 

th e backend apparatus 

accepting the tag output information a k , i as an input at an input section of the backend 
apparatus ; 

applying the first function Fl w u times (w u e {1, 2, max}) to d initial elements f u , 0 
(ue {1, . . ., d}) corresponding to the tag ID information id n , and applying the second function 
F2 to a bit combination value of these values Fl ^(f^o) to determine a calculated value c in a 
third calculator of the backend apparatus ; and 

comparing the tag output information a k , i against the calculated value c in a 
comparator of the backend apparatus ; 

in the event the tag output information a k , i does not match the calculated value c, 
executing the processings in the third calculator and the comparator again by changing the 
value of at least part of n and w u ; 

and in the event the tag output information a kt j matches the calculated value c, 
extracting tag ID information id n which is related to the combination of d initial elements f u ,o 
corresponding to the calculated value c from the database memory by a reader of the backend 
apparatus . 
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Claim 14 (Currently Amended): A tag privacy protection method for preventing 
privacy information of a user from being acquired from information which is delivered from 
a tag device, in which a combination of d (d > 2) elements e u , vu (u e { 1 , . . ., d}) which 
corresponds to each tag ID information id k and a proper value > which is inherent to each tag 
ID information idk are stored in a confidential value memory of each tag device k where 
(k G { 1 , . . ., ml and , wh e r e m represents a total number of tag devices,,) and in which a 
combination of d (d S>) elements e u , vu where f u e { 1 , . . ., d}J which corresponds to each tag 
ID information idk and a proper value % which is inherent to each tag ID information id k are 
stored in a database memory of a backend apparatus in a manner relating to each other; 
comprisingi th e st e ps of 

th e tag d e vic e 

reading out the d elements e u , vu and the proper value % from the confidential value 
memory, and applying a second function F2 which disturbs a relationship between elements 
of a definition domain and a mapping thereof to a confidential value s k , i which is a bit 
combination value of the d elements and the proper value to generate tag output information 
a k , j=F2(s k , i) in a second calculator of the tag device ; 

delivering the tag output information a k , i from an output section of the tajg device ; 

aftd-extracting at least part of elements e u \ V u' (u f e { 1 , . . ., d}) from the confidential 
value memory, applying a first function Fl, an inverse image of which is difficult to obtain, 
to the extracted elements e u \ vu 1 , and saving a result of such calculation Fl (e u \ VU ') as new 
elements e u -, VU '+i in the confidential value memory by overwriting in a first calculator of the 
tag device ; 

th e backend apparatus 
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accepting the tag output information a^ i as an input at an input section of the back end 
apparatus ; 

applying the first function Fl w u times (w u G {1,2, ., max}) to the d initial elements 
f U)0 (ug {1, d}) corresponding to the tag ID information id n and applying the second 
function F2 to a bit combination value of the function values Fl wu (f u , 0 ) and the proper value 
Y n to determine a calculated value c in a third calculator of the backend apparatus ; and 

comparing the tag output information i against the calculated value c in a 
comparator of the backend apparatus ; 

in the event the tag output information a k , i does not match the calculated value c, 
executing the processings in the third calculator and the comparator again by changing the 
value of al least part of n and w u ; 

and in the event the tag output information a k> i matches the calculated value c, 
extracting tag ID information id n which is related to the combination the plurality of initial 
elements f u , 0 corresponding to the calculated value c from the database memory by a reader 
of the backend apparatus . 

Claim 15 (Currently Amended): A tag privacy protection method for preventing 
privacy information of a user from being acquired from information which is delivered from 
a tag device, in which d (d > 1) elements e u , vu (u€ { 1, . . ., d}) are stored in a confidential 
value memory of each tag device k where fk e { 1 , . . m} T and^v4rere m represents a total 
number of tag devices), a manifold value z having t kinds (t > 2) of values is stored in a first 
manifold value memory of each tag device k, a combination of d initial elements f u ,o 
comprising one selected from each of d kinds (d > 1) of subgroups %(ue {1, ...,d}) and tag 
ID information id n (ne {1, . . m}) of each tag device are stored in a database memory of a 
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backend apparatus in a manner relating to each other, and the manifold value z is stored in a 
second manifold value memory of the backend apparatus; comprising^ th e st e ps of 
th e tag d e vic e 

reading out each element e u , vu from the confidential value memory and reading out 
either manifold value z from the first manifold value memory and applying a second function 
F2 which disturbs a relationship between elements of a definition domain and a mapping 
thereof to a confidential value Sk, i which is a bit combination value of the elements and the 
manifold value to generate tag output information a k , i=F2(sk, i) in a second calculator of the 
tag device ; 

delivering the tag output information ak, i from an output section of the tag device ; 

and-extracting at least part of elements eu-, VU ' (u' e { 1 , . . d}) from the confidential 
value memory each time the output section delivers the tag output information a k , j t times, 
applying a first function Fl, an inverse image of which is difficult to obtain, to the extracted 
elements e u \ vus and saving a result of such calculation Fl(e u \ vuO as new elements 
the confidential value memory by overwriting in a first calculator of the tag device ; 

th e back e nd apparatus 

accepting the tag output information ak, i as an input at an input section of the backend 
apparatus ; 

applying the first function Fl w u times (w u G {1 , 2, . . max}) to the d initial elements 
f u, o (u e { 1 , . . ., d}) corresponding to the tag ID information id n and applying the second 
function F2 to a bit combination value of these values Fl ^(fu, o) and the manifold value z to 
determine a calculated value c in a third calculator of the backend apparatus ; and 

comparing the tag output information a k , j against the calculated value c in a 
comparator of the backend apparatus ; 
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in the event the tag output information a k , i does not match the calculated value c, 
executing the processings in the third calculator and the comparator again by changing the 
value of at least part of n, w u and z; 

and in the event the tag output information a k , i matches the calculated value c, 
extracting the tag ID information id n which is related to the combination of the d initial 
elements f u , o corresponding to the calculated value c from the database memory by a reader 
of the backend apparatus . 

Claim 16 (Currently Amended): A tag privacy protection method for preventing 
privacy information of a user from being acquired from information which is delivered from 
a tag device, in which d (d > 2) elements e u , vu (u G { 1 , . . d}) are stored in a confidential 
value memory of each tag device k (k € { 1 , . . . , m} , where m represents a total number of tag 
devices), a manifold value z u which assumes t u kinds (t u > 2) of values for each u is stored in 
a first manifold value memory of each tag device k, a combination of d initial elements f u , 0 
comprising one selected from each of d kinds (d > 2) of subgroups (u e { 1 , . . ., d}) and tag 
ID information id n (ne {1, m}) of each tag device are stored in a database memory of a 
backend apparatus in a manner relating to each other, and the manifold value z u is stored in a 
second manifold value memory of the backend apparatus; comprising: the stops of 

th e tag d e vic e 

reading out each element e u , vu from the confidential value memory and reading out 
either manifold value z u for each u from the first manifold value memory and applying a 
second function F2 which disturbs a relationship between elements of a definition domain 
and a mapping thereof to a confidential value s k , \ which is a bit combination value of e u , vu 
and z u to generate tag output information a k , i=F2(s k> i) in a second calculator of the tag device; 

delivering the tag output information a k , j from an output section of the tag device ; 
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extracting at least part of elements e^, VU ' (u' g { 1 , . . d}) from the confidential value 
memory each time the output section delivers the tag output information a k , i some number of 
times, applying a first function Fl, an inverse image of which is difficult to obtain, to the 
extracted elements e^, V us and saving a result of such calculation Fl(e u \ V u0 as new elements e u - 5 
vu'+i in the confidential value memory by overwriting in a first calculator of the tag device ; 

the back e nd apparatus 

accepting the tag output information a k , i as an input at an input section of the backend 
apparatus ; 

applying w u times (w u e {1,2, . . ., max}) the first function Fl to the d initial elements 
f u>0 (ug {1, . . d}) corresponding to the tag ID information id n , and applying the second 
function F2 to a bit combination value of these values Fl^Cfu.o) and the manifold value z u to 
determine a calculated value c in a third calculator of the backend apparatus ; and 

comparing the tag output information a k , i against the calculated value c in a 
comparator of the backend apparatus ; 

in the event the tag output information a kj j does not match the calculated value c, 
executing the processings in the third calculator and the comparator again by changing the 
value of at least part of n, w u and z u ; 

and in the event the tag output information a k , j matches the calculated value c, 
extracting tag ID information id n which is related to the combination of a plurality of initial 
elements f U) 0 corresponding to the calculated value c from the database memory by a reader 
of the backend apparatus . 

Claim 17 (Currently Amended): A tag device for use in an automatic tag 
identification system comprising: 
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a confidential value memory in which a confidential value corresponding to tag ID 
information is stored; 

a second calculator connected to the confidential value memory for reading out the 
confidential value from the confidential value memory and for applying a second function F2 
which disturbs a relationship between elements of a definition domain and a mapping thereof 
to the confidential value which is read out to generate tag output information; 

an output section for delivering the tag output information; 

and a first calculator for reading out at least part of elements of the confidential value 
from the confidential value memory and for applying a first function Fl , an inverse image a 
mapping of which is difficult to obtain, to the elements which are read out, with a result of 
such calculation being used to update the confidential value in the confidential value memory 
by overwriting. 

Claim 18 (Currently Amended): A backend apparatus for use in an automatic tag 
identification system comprising 

a database memory in which each tag ID information and a corresponding 
confidential value are related to each other; 

an input section which accepts tag output information as an input; 

a calculator for applying a first function Fl which is used in a tag device some 
number of times to at least part of elements of the confidential value in the database memory 
and which then applies a second function which is used in the tag device thererto; 

a comparator for sequentially comparing a result of the calculation in the calculator 
against the tag output information; 
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and a reader for extracting the tag ID information which is related to the confidential 
value corresponding to the matching result of calculation when a matching between the result 
of calculation and the tag output information is found from the database memory , wherein 

an inverse image of the first function Fl is difficult to obtain, the second function F2 
disturbs a relationship between elements of a definition domain and a mapping thereof . 

Claim 19 (Original): A tag device for use in an automatic tag identification system 
comprising 

a confidential value memory in which a first confidential value s k? i corresponding to 
tag ID information idk is stored; 

a second calculator connected to the confidential value memory for reading out the 
first confidential value s k , i from the confidential value memory and for applying a second 
function F2 which disturbs a relationship between elements of a definition domain and a 
mapping thereof to the first confidential value s k , i to generate tag output information F2(s ki 0; 

an output section for delivering the tag output information F2(s k , 0; 

and a first calculator connected to the confidential value memory for reading out the 
first confidential value s k , j from the confidential value memory, for applying a first function 
Fl, an inverse image of which is difficult to obtain, to the first confidential value and for 
saving a result of such calculation Fl(s ki 0 as a new first confidential value s k> j+i in the 
confidential value memory by overwriting. 

Claim 20 (Original): A tag device according to Claim 19, further comprising 
a counter for counting a number of times rn the first confidential value is updated, 
the output section also delivering information which specifies the number of updating 
times rn. 
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Claim 21 (Original): A tag device for use in an automatic tag identification system 
comprising 

a confidential value memory in which a first confidential value s k , j and a first proper 
value w k which correspond to a tag ID information id k are stored; 

a second calculator connected to the confidential value memory for reading out the 
first confidential value s ki j from the confidential value memory and for applying a second 
function F2 which disturbs a relationship between elements of a definition domain and a 
mapping thereof to the first confidential value to generate tag output information F2(s k , i); 

an output section for delivering the tag output information F2(s k , j); 

and a first calculator connected to the confidential value memory for reading out the 
first confidential value s k , i and the first proper value w k from the confidential value memory, 
for applying a first function Fl, an inverse image of which is difficult to obtain, to a bit 
combination value of the first confidential value and the first proper value and for saving a 
result of such calculation Fl(s k , , | w k ) as a new first confidential value s k , i+ i in the 
confidential value memory by overwriting. 

Claim 22 (Currently Amended): A backend apparatus for use in an automatic tag 
identification system comprising 

a database memory in which each tag ID information id n (ne { 1 , . . ., m}, where m 
represents a total number of tag devices) and a second confidential value s n , i corresponding 
thereto are related to each other; 

an input section which accepts tag output information F2(s k , i) as an input; 

a third calculator connected to the database memory for reading out the second 
confidential value s n> i from the database memory, applying j times (j e {0, . . ., j ma x}) a first 
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function Fl which is used in a tag device to each of the second confidential values s n> i which 
are read out, and for subsequently applying a second function F2 which is used in the tag 
device; 

a comparator for comparing the tag output information F2(s ki 0 against a result of 
calculation in the third calculator F2(Fl J (s n , i)); 

a controller for causing the processings in the third calculator and the comparator to 
be executed again by changing the value of at least one of n and j in the event the tag output 
information F2(s k , 0 and the result of calculation F2(Fl J (s n , 0) do not match; 

and a reader connected to the database memory and operative when the tag output 
information F2(s k , ,) matches the result of the calculation F2(Fl J (s n , i)) to extract the tag ID 
information id n which is related to the second confidential value s n> i corresponding to the 
matching result of the calculation F2(Fl j (s n , 0) from the database memory, wherein 

an inverse image of the first function Fl is difficult to obtain, the second function F2 
disturbs a relationship between elements of a definition domain and a ma pping thereof 

Claim 23 (Original): A backend apparatus according to Claim 22 in which the input 
section accepts an input of information which specifies a number of times rn the first 
confidential value is updated in the tag device, the third calculator applies the first function 
Fl j=rn times to each of the confidential values s n , i which are read out and then applies the 
second function F2 thereto, and the controller causes the processings in the third calculator 
and the comparator to be executed again by changing the value of n when the tag output 
information F2(s k , 0 does not match the result of the calculation F2(Fl J (s n , 0). 

24 (Original): A backend apparatus according to Claim 22 in which the database 
memory stores the result of the calculation F2(Fl J (s n , 0) in the third calculator in a manner 
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relating it to the second confidential value s n , i, and the comparator performs a comparing 
processing by using the result of the calculation F2(Fl J (s n , i)) stored in the database memory. 

Claim 25 (Currently Amended): A backend apparatus for use in an automatic tag 
identification system comprising 

a database memory in which each tag ID information id n (ne {1, . . m}), a 
corresponding second confidential value s n , i and second proper value w n are stored in a 
manner relating to each other; 

a input section which accepts an input of tag output information F2(s kj »); 
a third calculator connected to the database memory for reading out the second 
confidential value s n , i and the second proper value w n from the database memory and for 
applying a second function F2 to I J (n) where I j (n)-s n , , 0=0), and I^n^FUI^Cn) | id n ) (j > 1) 
to calculate F2(I j (ntt where Fl represents a fir st function; 

a comparator for comparing the tag output information F2(s k , 0 against the result of 
the calculation in the third calculator F2(I J (n)); 

a controller for causing the processings in the third calculator and the comparator to 
be executed again by changing the value of at least one of n and j when the tag output 
information F2(s k , 0 does not match the result of the calculation F2(I J (n)); 

and a reader for extracting tag ID information id n which is related to the second 
confidential value s n> , and the second proper value w n corresponding to the matched result o1 
calculation F2(I J (n)) from the database memory when a matching between the tag output 
information F2(s k , 0 and the result of the calculation F2(I J (n)) is found wherein 

an inverse image of the first function Fl is difficult to obtain , the second function F2 
disturbs a relationship between elements of a definition domain and a mapping th ereof 
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Claim 26 (Original): A tag device for use in an automatic tag identification system 
comprising 

a confidential value memory in which a first confidential value s k , i and a first proper 
value w k corresponding to tag ID information id k are stored; 

a second calculator connected to the confidential value memory for reading out the 
first confidential value s k , i and the first proper value w k from the confidential value memory 
and for applying a second function F2 which disturbs a relationship between elements of a 
definition domain and a mapping thereof to a bit combination value of the first confidential 
value and the first proper value to generate tag output information F2(s k , i | w k ); 

an output section for delivering the tag output information F2(s k> i | w k ) 

and a first calculator connected to the confidential value memory for reading the first 
confidential value s k , i from the confidential value memory, applying a first function Fl, an 
inverse image of which is difficult to obtain, to the first confidential value s k , j which is read 
out and saving a result of such calculation Fl(s k , 0 as a new first confidential value s k , i+ i in 
the confidential value memory by overwriting. 

Claim 27 (Currently Amended): A backend apparatus for use in an automatic tag 
identification system comprising 

a database memory in which each tag ID information id n (n€ {1, . . m}) and a 
corresponding second confidential value s„, i and second proper value w n are stored in a 
manner relating to each other; 

an input section which accepts an input of tag output information F2(s k , i | w k ); 

a third calculator connected to the database memory for reading out the second 
confidential value s n , i and the second proper value w n from the database memory, applying j 
times 0 e {0, . . j max }) a first function Fl which is used in a tag device to the second 
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confidential value s n? i, determining a bit combination value Fl j (s n , 0 | w n of a result of 
application Fl j (s n , 0 and the second proper value w n , and applying a second function F2 which 
is used in the tag device to the bit combination value Fl J (s n> j | w n ); 

a comparator for comparing the tag output information F2(s k> j | w k ) against a result of 
calculation in the third calculator F2(Fl j (s n , j) | w n ); 

a controller for causing the processings in the third calculator and the comparator to 
be executed again by changing the value of at least one of n and j when the tag output 
information F2(s k , j | w k ) does not match the result of the calculation F2(Fl J (s n , 0 | w n ); 

and a reader connected to the database memory for extracting the tag ID information 
id n which is related to the second confidential value s n , i and the second proper value w n 
corresponding to the matched result of calculation F2(Fl J (s n , 0 | w n ) when a matching between 
the tag output information F2(s k> i | w k ) and the result of the calculation F2(Fl J (s n , i) | w n ) is 
found wherein 

an inverse image of the first function Fl is difficult to obtain, the second function F2 
disturbs a relationship between elements of a definition domain and a mapping thereof . 

Claim 28 (Original): A tag device for use in an automatic tag identification system 
comprising 

a confidential value memory in which a first proper value w k corresponding to each 
tag ID information id k and a first confidential value Sj which assumes an equal initial value S\ 
for a plurality of tag ID information are stored; 

a second calculator connected to the confidential value memory for reading out the 
first confidential value Sj and the first proper value w k from the confidential value memory 
and for applying a second function F2 which disturbs a relationship between elements of a 
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definition domain and a mapping thereof to a bit combination value of the first confidential 
value and the first proper value to generate tag output information F2(si | w k ); 

an output section for delivering the tag output information F2(sj | w k ); 

and a first calculator connected to the confidential value memory for reading out the 
first confidential value s\ from the confidential value memory, applying a first function Fl , an 
inverse image of which is difficult obtain, to the first confidential value Si which is read out 
and saving a result of such calculation Fl(si) as a new first confidential value Si+i in the 
confidential value memory by overwriting. 

Claim 29 (Currently Amended): A backend apparatus for use in an automatic tag 
identification system comprising 

a database memory in which each tag ID information id n (n e { 1 , . . m}) and a 
corresponding second proper value w n are stored in a manner relating to each other; 

a calculated value memory in which first results of calculation s J+ i are stored which 
are obtained by applying j times (j e {0, . . j ma x}) a first function which is used in a tag 
device to a second confidential value S\ which is used in common for a plurality of tag ID 
information; 

an input section which accepts an input of tag output information F2(sj | w k ); 

a third calculator connected to the database memory for reading out the first result of 
calculation Sj+i and the second proper value w n from the database memory to obtain a bit 
combination value thereof s j+ i | w n and for applying a second function F2 which is used in the 
tag device thereto; 

a comparator for comparing the tag output information F2(si | w k ) and the result of 
calculation in the third calculator F2(sj+i | w„); 
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a controller for causing the processings in the third calculator and the comparator to 
be executed again by changing the value of at least one of n and j when the tag output 
information F2(si | w k ) does not match the result of calculation F2(s j+ i | w n ); 

and a reader connected to the database memory for extracting the tag ID information 
id n which is related to the second proper value w n corresponding to the matched result of 
calculation F2(s J+ i | w n ) when a matching between the tag output information F2(si | w k ) and 
the result of calculation F2(s j+ i | w n ) is found wherein 

an inverse image of the first function Fl is difficult to obtain, the second function F2 
disturbs a relationship between elements of a definition domain and a ma pping thereof 

Claim 30 (Original): A tag device for use in an automatic tag identification system 
comprising 

a confidential value memory in which a combination of d (d 22) elements e u , vu (u e { 1 , 
. . d}) which corresponds to each tag ID information id k is stored; 

a second calculator connected to the confidential value memory for reading out the d 
elements e Ui vu from the confidential value memory and for applying a second function F2 
which disturbs a relationship between elements of a definition domain and a mapping thereof 
to a confidential value s k , , which is a bit combination value of the d elements to generate tag 
output information a k< r=F2(s k , 0; 

an output section for delivering the tag output information a k , j; 

and a first calculator connected to the confidential value memory for extracting at 
least part of elements e u -, vu . (u' e { 1 , . . . , d} ) from the confidential value memory, for applying 
a first function Fl, an inverse image of which is difficult to obtain, to the extracted elements 
e u ., vu' and for saving a result of such calculation Fl(e u -, vu ) as new elements e u ., V u'+i in the 
confidential value memory by overwriting. 
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Claim 31 (Currently Amended): A backend apparatus for use in an automatic tag 
identification system comprising 

a database memory in which a combination of d initial elements f u>0 comprising one 
selected from each of d kinds (d > 2) of subgroups q^(ug{1, . . d}), and tag ID information 
id n of each tag device n (n€ {1, . .., m}, where m represents a total number of tag devices) are 
stored in a manner relating to each other; 

an input section for accepting an input of tag output information a k , i; 

a third calculator for applying w u times (w u E {1, 2, . . max}) a first function Fl to 
the d initial elements f Ut0 (uG {1, d}) which correspond to the tag ID information id n and 
for applying a second function F2 to a bit combination value of these values Fl wu (f u , o) to 
determine a calculated value c; 

a comparator for comparing the tag output information a k , i against the calculated 
value c; 

a controller for causing the processings in the third calculator and the comparator to 
be executed again by changing the value of at least part of n and w u when the tag output 
information a k , i does not match the calculated value c; 

and a reader connected to the database memory for extracting tag ID information id n 
which is related to the combination of d initial elements f u , o corresponding to the calculated 
value c when the tag output information a k , i matches the calculated value c , wherein 

an inverse image of the first function Fl is difficult to obtain, the second function F2 
disturbs a relationship between elements of a definition domain and a mapping thereof 

Claim 32 (Original): A tag device for use in an automatic tag identification system 
comprising 
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a confidential value memory in which a combination of d (d > 2) elements e u> vu 
(ue{l, d}) which correspond to each tag ID information id k and a proper value % which 
is inherent to each tag ID information idk are stored; 

a second calculator connected to the confidential value memory for reading out the d 
elements e u> vu and the proper value from the confidential value memory and for applying a 
second function F2 which disturbs a relationship between elements of a definition domain 
and a mapping thereof to a confidential value s k , i which is a bit combination value of the d 
elements and the proper value to generate tag output information a k? r=F2(s k> i); 

an output section for delivering the tag output information a k) i; 

and a first calculator connected to the confidential value memory for extracting at 
least part of the elements e u \ VU ' (u' e { 1 , . . ., d}) from the confidential value memory, applying 
a first function Fl, an inverse image of which is difficult to obtain, to the extracted elements 
e u -, vu' and for saving a result of such calculation Fl(e u <, VU ') as new elements e u -, V u+i in the 
confidential value memory by overwriting; 

Claim 33 (Currently Amended): A backend apparatus for use in an automatic tag 
identification system comprising 

a database memory in which a combination of d initial elements f Ui 0 comprising one 
selected from each of d kinds (d > 2) of subgroups (ue {1, . . d}), a proper value 7 n 
which is inherent to each tag ID information id n (ne {1, . . ., m}) and each tag ID information 
id n are stored in a manner relating to each other; 

an input section for accepting an input of tag output information a k< j; 

a third calculator for applying w u times (w u e {1,2, max}) a first function Fl to 
the d initial elements f Ui0 (ue {1, d}) corresponding to the tag ID information id n and for 
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applying a second function F2 to a bit combination value of these values Fl ^(fu, o) and the 
proper value 7 n to determine a calculated value c; 

a comparator for comparing the tag output information a k , j against the calculated 
value c; 

a controller for causing the processings in the third calculator and the comparator to 
be executed again by changing the value of at least part of n and w u when the tag output 
information a k , i does not match the calculated value c; 

and a reader connected to the database memory for extracting tag ID information id n 
which is related to the combination of a plurality of initial elements f Ut0 corresponding to the 
calculated value c from the database memory when a matching between the tag output 
information ak, i and the calculated value c is found , wherein 

an inverse image of the first function Fl is difficult to obtain, the second function F2 
disturbs a relationship between elements of a definition domain and a mapping thereof . 

Claim 34 (Original): A tag device for use in an automatic tag identification system 
comprising 

a confidential value memory in which d (d > 1 ) elements e u , vu (u e { 1 , . . d}) are 

stored; 

a first manifold value memory in which a manifold value z which assumes t kinds (t > 
2) of values is stored; 

a second calculator connected to the confidential value memory and the first manifold 
value memory for reading out the elements e u , V u from the confidential value memory and for 
reading out either manifold value z from the first manifold value memory and for applying a 
second function F2 which disturbs a relationship between elements of a definition domain 
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and a mapping thereof to a confidential value s k? i which is a bit combination value of the 
elements and the manifold value to generate tag output information a k , i=F2(s k> 0; 

an output section for delivering the tag output information a k , i; 

and a first calculator connected to the confidential value memory for extracting at 
least part of elements e u -, vu * (u 1 £ { 1 , . . d}) from the confidential value memory each time the 
output section delivers the tag output information a k , i t times, for applying a first function Fl, 
an inverse image of which is difficult to obtain, to the extracted elements e u \ VU ' and for saving 
a result of such calculation Fl(e u ', vu ') as new elements e u - t vu +i in the confidential value 
memory by overwriting . 

Claim 35 (Original): A tag device according to Claim 34 in which as long as the first 
calculator does not update elements in the confidential value memory, the manifold value z 
used by the second calculator in generating the tag output information a k , j changes each time 
the tag output information a k , j is generated. 

Claim 36 (Currently Amended): A backend apparatus for use in an automatic tag 
identification system comprising 

a database memory in which a combination of d initial elements f Ut o comprising one 
selected from each of d kinds (d > 1) of subgroup c^(ue{l, ...,d}) and a tag ID information 
id n (ne {1, . . m}) of each tag device are stored in a manner relating to each other; 

a second manifold value memory in which a manifold value z which assumes t kinds 
(t ^) of values is stored; 

an input section for accepting an input of tag output information a k , i; 

a third calculator for applying w u times (w u e {1,2, . . ., max}) a first function Fl to 
the d initial elements f U( o(u6 {1, . . ., d}) in the database memory which correspond to the tag 
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ID information id n and for applying a second function F2 to a bit combination value of these 
values Fl^fu.o) and the manifold value z in the second manifold value memory to determine 
a calculated value c; 

a comparator for comparing the tag output information au, i against the calculated 
value c; 

a controller for causing the processings in the third calculator and the comparator to 
be executed again by changing the value at least part of n, w u and z when the tag output 
information a k , i does not match the calculated value c; 

and a reader connected to the database memory for extracting the tag ID information 
id n which is related to the combination of d initial elements f Ui 0 corresponding to the 
calculated value c from the database memory when a matching between the tag output 
information a k> i and the calculated value c is found , wherein 

an inverse image of the first function Fl is difficult to obtain, the second function F2 
disturbs a relationship between elements of a definition domain and a mapping thereof 

Claim 37 (Original): A tag device for use in an automatic tag identification system 
comprising 

a confidential value memory in which d (d > 2) elements e u , vu (u e { 1 , . . d}) are 

stored; 

a first manifold value memory in which a manifold value z u which assumes t u kinds 
(t u > 2) of values for each u is stored; 

a second calculator connected to the confidential value memory and the first manifold 
value memory for reading out the elements e u , vu from the confidential value memory and for 
reading out either manifold value z u for each u from the first manifold value memory and for 
applying a second function F2 which disturbs a relationship between elements of a definition 
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domain and a mapping thereof to a confidential value s k , i which is a bit combination value of 
these e v , vu and z u to generate tag output information a k , i=F2(s k> i); 

an output section for delivering the tag output information a k) \\ 
and a first calculator connected to the confidential value memory for extracting at 
least part of the elements e U ', w (u 1 e {1 , . . d}) from the confidential value memory each time 
the output section delivers the tag output information a k , i some number of times, for applying 
a first function Fl, an inverse image of which is difficult to obtain, to the extracted elements 
e u \ vu*, and for saving a result of such calculation Fl(e u -, vu') as new elements e u -, VU '+i in the 
confidential value memory by overwriting. 

Claim 38 (Original): A tag device according to Claim 37 in which each time the 
output section delivers the tag output information a k , i? the first calculator extracts at least part 
of the elements e u \vv from the confidential value memory, applies the first function Fl to the 
extracted elements e u «, vu- and saves a result of such calculation Fl(eu', VU ') as new elements e u \ 
vu + i in the confidential value memory by overwriting. 

Claim 39 (Original): A tag device according to Claim 37 in which each time the 

d 

output section delivers the tag output information a k , j t u times, the first calculator 

u=l 

extracts at least part of the elements e u \ VU ' from the confidential value memory, applies the 
first function Fl to the extracted elements e^vu*, and saves a result of such calculation Fl(e u -, 
vu ) as new elements e u -, vu + i in the confidential value memory by overwriting. 

40 (Original): A tag device according Claim 39 in which as long as the first 
calculator does not update the elements in the confidential value memory, a combination of 
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manifold values z u (uG {1, d}) which are used by the second calculator in generating the 
tag output information a^ i changes each time the tag output information ak, i is generated. 

Claim 41 (Currently Amended): A backend apparatus for use in an automatic tag 
identification system comprising 

a database memory in which a combination of d initial elements f u ,o which comprises 
one selected from each of d kinds (d > 1 ) of subgroups (u e { 1 , . . d}) and tag ID 
information id„ (ne {1, . . ., m}) of each tag device are stored in a manner relating to each 
other; 

a second manifold value memory in which a manifold value z u which assumes t u kinds 
(t u > 2) of values for each u is stored; 

an input section for accepting an input of tag output information ak, \; 

a third calculator for applying w u times (w u e {1,2, . . max}) a first function Fl 
which is used in a tag device to the d initial elements f u ,o(ue{l, d}) corresponding to the 
tag ID information id n and for applying a second function F2 which is used in the tag device 
to a bit combination value of these values Fl wu (f u , 0 ) and the manifold value z u to determine a 
calculated value c; 

a comparator for comparing the tag output information ak, i against the calculated 
value c; 

a controller for causing the processings in the third calculator and the comparator to 
be executed again by changing the value of at least part of n, w u and z; 

and a reader connected to the database memory for extracting tag ID information id n 
which is related to the combination of the d initial elements f U) 0 corresponding to the 
calculated value c from the database memory when a matching between the tag output 
information ak, i and the calculated value c is found , wherein 
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an inverse image of the first function Fl is difficult to obtain, the second function F2 
disturbs a relationship between elements of a definition domain and a mapping thereof 

Claim 42 (Currently Amended): A tag privacy protection method for preventing 
privacy information of a user from being acquired from information which is delivered from 
a tag device, in which privileged ID information sid h which is formed by privileging 
respective tag ID information id h is stored in a confidential value memory of each tag device; 
comprising: tho st e p s of 

tho tag device 

reading out the privileged ID information sidh stored in the confidential value memory 
in a read/write section of the tag device ; 

and-delivering the privileged ID information sid h to an updater which is provided 
externally of each tag device from a first output section of the tag device ; 

th o updat e r 

accepting an input of the privileged ID information sid h at a first input section of the 
updater ; 

updating the privileged ID information sidh to g e nerating new privileged ID 
information sid h \ both the privileged ID information sidh and the new privileged ID 
information sidh 1 corresponding to the tag ID information id h , tho association of which with 
tho privileg e d ID information sid h i s difficult to follow in an updating section of the updater; 

delivering the new privileged ID information sid h ' to the tag device from a second 
output section of the updater ; 

tho tag d e vice further 

accepting an input of the new privileged ID information sid h ' at a second input section 
of the tag device ; and 
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th e r e ad/writ e s e ction of th e tag d e vic e storing the new privileged ID information sidh 
in the confidential value memory. 

Claim 43 (Currently Amended): A tag privacy protection method for preventing 
privacy information of a user from being acquired from information which is delivered from 
a tag device, in which the privileged ID information sidh which is a random value ih related to 
each tag ID information id h is stored in a confidential value memory of each tag device h 
(he {1, . . m}, where m represents a total number of tag devices), and each tag ID 
information id h and privileged ID information sidh which is the random value r h related to the 
tag ID information id h are stored in a privileged ID memory of an updater which is provided 
externally of each tag device h in a manner relating to each other; comprising; the st e ps of 

th e tag d e vic e h 

reading out the privileged ID information sidh stored in the confidential value memory 
thereof in a first read/write section of the tag device h ; 

and-delivering the privileged ID information sidh to the updater from a first output 
section of the tag device h ; 

th e updat e r 

accepting an input of the privileged ID information sidh at a first input section of the 
updater ; 

generating a new random value rh' in a random value generator of the updater ; 

selecting tag ID information id h corresponding to the privileged ID information sid h 
which is accepted as the input from the privileged ID memory and storing the new random 
value rh' in the privileged ID memory in a manner relating to new privileged ID information 
sidh' in a second read/write section of the updater ; 



38 



Application No. 10/537,915 

Reply to Office Action of April 3, 2009 

and-delivering the new privileged ID information sid h ' to the tag device h from a 
second output section of the updater ; 
th e tag d e vice h further 

accepting an input of the new privileged ID information sidh at a second input section 
of the tag device h ; and 

th e r e ad/writo section of the tag d e vic e storing the new privileged ID information sid h ' 
in the confidential value memory. 

Claim 44 (Currently Amended): A tag privacy protection method for preventing 
privacy information of a user from being acquired from information which is delivered from 
a tag device, in which privileged ID information sid h is stored in a confidential value memory 
of each tag device h (h e { 1 , . . m}, where m represents a total number of tag devices), the 
privileged ID information sid h including a first encrypted text according to a common key 
encryption technique which corresponds to each tag ID information id h and key ID 
information kidj of a common key kj used in the encryption (je{l,...,n}, where n represents 
a total number of tag devices), and each key ID information kidj are stored and each common 
key kj in a key memory of an updater which is provided externally of each tag device h in a 
manner relating to each other; comprising: the st e ps of 

the tag device h 

reading out the privileged ID information sid h stored in the confidential value memory 
thereof in a first read/write section of the tag device h ; 

and-delivering the privileged ID information sid h to an updater from a first output 
section of the tag device h ; 

th e updat e r 
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accept ing s an input of the privileged ID information sid h at a first input section of the 
updater ; 

extracting the common key kj corresponding to the key ID information kidj included 
in the privileged ID information sid h from the key memory by a second read/write section_of 
the updater ; 

decrypting the first encrypted text using the common key kj extracted by the second 
read/write section to extract tag ID information id h by an ID extractor of the updater; 

generating a second encrypted text, the association of which with th e fir s t encrypt e d 
t e xt is difficult to follow, using the tag ID information id h extracted by the ID extractor and 
the common key kj which is used in the extraction in an encryptor of the updater; 

and-delivering new privileged ID information sid h ' including the second encrypted 
text and the key ID information kidj of the common key kj to the tag device h from a second 
output section of the updater ; 

the tag d e vic e h further 

accepting an input of the new privileged ID information sid h ' at a second input section 

of the tag device h ; and 

the fir s t rcad/writ o s ection of th e tag d e vice storing the new privileged ID information 

sidh' in the confidential value memory. 

Claim 45 (Currently Amended): A tag privacy protection method for preventing 
privacy information of a user from being acquired from information which is delivered from 
a tag device, in which privileged ID information sid h is stored in a confidential value memory 
of each tag device h (hE {1, m}, where m represents a total number of tag devices), the 
privileged ID information sid h including a first encrypted text according to a pubic key 
encryption technique which corresponds to each tag ID information id h and key ID 
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information kidj for a key pair (skj, pkj) (where skj represents a secret key and pkj represents a 
public key, j G { 1 , . . n}, where n represents a total number of tag devices), and each key ID 
information kidj and each key pair (skj, pkj) in a key memory of an updater which is provided 
externally of each tag device h in a manner relating to each other; comprising: th o steps of 
tho tag device h 

reading out the privileged ID information sid h stored in the confidential value memory 
in a first read/write section of the tag device h ; 

and-delivering the privileged ID information sid h to an updater from a first output 
section of the tag device h ; 

th o updat e r 

accepting an input of the privileged ID information sid h at a first input section of the 
updater ; 

extracting the key pair (skj, pkj) which corresponds to the key ID information kidj 
which is included in the privileged ID information sid h accepted as the input to the first input 
section by a second read/write section of the updater; 

decrypting the first encrypted text using the secret key skj extracted by the second 
read/write section to extract the tag ID information id h by an ID extractor of the updater ; 

generating a second encrypted text, tho as s ociation of which with tho first encrypted 
toxt is difficult to follow, using the tag ID information id h extracted by the ID extractor and 
the public pkj which is extracted by the second read/write section by an encryptor of the 
updater ; 

and-delivering new privileged ID information sid h ' including the second encrypted 
text and the key ID information kidj of the key pair (skj, pkj) to the tag device h from a second 
output section of the updater ; 

th o tag d e vice h further 
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accepting an input of the new privileged ID information sidh f at a second input section 
of the tag device h ; and 

th e r e ad/write section storing the new privileged ID information sid h ' in the 
confidential value memory. 

Claim 46 (Currently Amended): A tag privacy protection method for preventing 
privacy information of a user from being acquired from information which is delivered from 
a tag device, in which privileged ID information sid h is stored in a confidential value memory 
of each tag device h (he {1, . . m}, where m represents a total number of tag devices), the 
privileged ID information sid h including a first encrypted text according to re-encryptable 
public key encryption technique which corresponds to each tag ID information id h and key ID 
information kidj of the public key pkj (j e { 1 , . . . , n} , where n represents a total number of 
keys), each key ID information kidj and each public key pkj are stored in a key memory of an 
updater which is provided externally of each tag device h in a manner relating to each other; 
comprising: th e st e ps of 

the tag d e vice h 

readings out the privileged ID information sid h stored in the confidential value 
memory in a first read/write section of the tag device h ; 

and-deliverings the privileged ID information sid h to an updater from a first output 
section of the tag device h ; 

the updat e r comprising 

accepting an input of the privileged ID information sid h at a first input section of the 
updater ; 
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extracting the public key pkj which corresponds to the key ID information kidj 
included in the privileged ID information sid h which is accepted as the input to the first input 
section from the key memory by a second read/write section of the updater ; 

re-encrypting the first encrypted text in the privileged ID information sid h using the 
public key pkj extracted by the second read/write section to generate a second encrypted text, 
the association of which with the first encrypted text i s difficult to follow, by an encryptor_of 
the updater ; 

and for delivering new privileged ID information sid h ' including the second encrypted 
text and the key ID information kidj of the public key pkj to the tag device h from a second 
output section of the updater ; 

the tag device h furth e r 

accept ing an input of the new privileged ID information sid h ' at a second input section 
of the tag device h ; and 

th e r o ad/writ e s e ction storing the new privileged ID information sid h ! in the 
confidential value memory. 

Claim 47 (Currently Amended): A tag privacy protection method for preventing 
privacy information of a user from being acquired from information which is delivered from 
a tag device, in which privileged ID information sid h which has privileged each tag ID 
information idh is stored in a confidential value memory of each tag device h (h e { 1 , . . ., m}, 
where m represents a total number of tag devices); comprising: th e st e ps of 

th e tag devic e h 

reading out the privileged ID information sid h stored in the confidential value memory 
by a first read/write section of the tag device h ; 
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and-delivering the privileged ID information sid h to a first updater which is provided 
externally of the tag device h from a first output section of the tag device h ; 
th e fir s t updat e r 

accepting an input of the privileged ID information sid h at a first input section of the 
first updater ; 

determining tag ID information id h from the privileged ID information sid h by an ID 
extractor of the first updater ; 

and-delivering the tag ID information id h to a second updater which is provided 
externally of the tag device h from a second output section of the first updater; 

the s e cond updat e r 

accepting an input of the tag ID information id h at a third input section of the second 
updater ; 

generating new privileged ID information sid h ' which has privileged the tag ID 
information id h by an encryptor of the second updater ; 

and-delivering the new privileged ID information sid h ' to the tag device h from a third 
output section of the second updater ; 

the tag device h further accepting an input of the new privileged ID information sid h f 
at a second input section of the tag device h ; and 

th e road/write s e ction storing the new privileged ID information sid h ' in the 
confidential value memory. 

Claim 48 (Original): An updater for updating privileged ID information in a tag 
device, the updater being provided externally of the tag device and comprising 
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a privileged ID memory for storing each tag ID information id h and privileged ID 
information sidh which is a random value r h which corresponds to the tag ID information id h 
in a manner relating to each other; 

a first input section which accepts an input of the privileged ID information sid h 
which is delivered from the tag device; 

a random value generator for generating a new random value r h '; 

a second read/write section connected to the privileged ID memory for selecting tag 
ID information id h which corresponds to the privileged ID information sid h which is accepted 
by the first input section as the input from the privileged ID memory and for relating this with 
the new random value r h ' as new privileged ID information sid h ' to be stored in the privileged 
ID memory; 

and a second output section for delivering the new privileged ID information sid h ' to 
the tag device h. 

Claim 49 (Currently Amended): An updater for updating privileged ID information in 
a tag device, the updater being provided externally of the tag device and comprising 

a key memory for storing each key ID information kidj (j e { 1 , . . n}, where n 
represents a total number of keys) and each common key kj of a common key encryption 
technique in a manner relating to each other; 

a first input section for accepting an input of privileged ID information sid h which 
includes a first encrypted text according to the common key encryption technique which 
corresponds to the tag ID information id h and key ID information kidj of the common key kj 
which is used in the encryption; 
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a second read/write section connected to the key memory for extracting the common 
key kj which corresponds to the key ID information kidj which is included in the privileged 
ID information sid h from the key memory; 

an ID extractor for decrypting the first encrypted text using the common key kj which 
is extracted by the second read/write section to extract tag ID information id h ; 

an encryptor for generating a second encrypted text, the association of which with 
first encrypt e d t e xt is difficult to follow, using the tag ID information id h extracted by the ID 
extractor and the common key kj which is used in the extraction; 

and a second output section for delivering new privileged ID information sidh' which 
includes the second encrypted text and the key ID information kidj for the common key kj to 
the tag device h. 

Claim 50 (Currently Amended): An updater for updating privileged ID information in 
a tag device, the updater being provided externally of the tag device and comprising 

a key memory for storing each key ID information kidj (je{l,...,n}, where n 
represents a total number of keys) and each key pair (skj, pkj) (skj represents a secret key and 
pkj a public key) in a manner relating to each other; 

a first input section for accepting an input of privileged ID information sid h which 
includes a first encrypted text according to a public key encryption technique which 
corresponds to tag ID information id h and key ID information kidj for the public key pkj 
which is used in the encryption; 

a second read/write section connected to the key memory for extracting the key pair 
(skj, pkj) which corresponds to the key ID information kidj which is included in the privileged 
ID information sid h accepted by the first input section as the input from the key memory; 
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an ID extractor for decrypting the first encrypted text using the secret key skj 
extracted by the second read/write section to extract tag ID information id h ; 

an encryptor for generating a second encrypted text, the association of which with the 
first e ncrypt e d t e xt is difficult to follow, using the tag ID information id h extracted by the ID 
extractor and the public key pkj extracted by the second read/write section; 

and a second output section for delivering new privileged ID information sid h ' which 
includes the second encrypted text and the key ID information kidj for the key pair (skj, pkj) 
to the tag device h. 

Claim 51 (Currently Amended): An updater for updating privileged ID information in 
a tag device, the updater being provided externally of the tag device and comprising 

a key memory for storing each key ID information kidj (j e { 1 , . . . , n} , where n 
represents a total number of keys) and each public key pkj in a manner relating to each other; 

a first input section for accepting an input of privileged ID information sid h which 
includes a first encrypted text according to re-encryptable public key encryption technique 
which corresponds to tag ID information id h and key ID information kidj for the public key 

a second read/write section connected to the key memory for extracting the public key 
pkj which corresponds to the key ID information kidj which is included in the privileged ID 
information sid h which is accepted by the first input section as the input from the key 
memory; 

an encryptor for re-encrypting the first encrypted text which is included in the 
privileged ID information sid h using the public key pkj extracted by second read/write section 
to generate a second encrypted text , the as s ociation of which with the first e ncrypted text is 
difficult to follow ; 
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and a second output section for delivering new privileged ID information sidh' which 
includes the second encrypted text and the key ID information kidj for the public key pkj to 
the tag device h. 

Claim 52 (Original): An updater according to one of Claims 49 to 51 in which the 
key ID information kidj is information which is shared by a plurality unrelated tag devices. 

Claim 53 (Currently Amended): An update solicitor for soliciting an updater to 
update privileged ID information in a tag device, the update solicitor being provided 
externally of the tag device and comprising 

a privileged ID input section to which a plurality of kinds of privileged ID's, which 
are two or more kinds of re-encryptable encrypted texts corresponding to an identical tag ID 
information idh, are input; 

a privileged ID memory for storing a plurality of kinds of privileged ID's which are 

input thereto; 

a privileged ID extractor connected to the privileged ID memory for extracting one of 
privileged ID's from the privileged ID memory at a given opportunity; 

and a privileged ID output section for delivering the extracted privileged ID to the tag 

device. 

Claim 54 (Currently Amended): A tag device for use in an automatic tag 
identification system comprising 

a privileged ID input section to which a plurality of kinds of privileged ID's, which 
are two or more kinds of re-encryptable encrypted texts corresponding to an identical tag ID 
information id h , are input; 
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a privileged ID memory for storing the plurality of kinds of privileged ID's which are 
input thereto; 

a privileged ID extractor connected to the privileged ID memory for extracting one of 
the privileged ID's from the privileged ID memory at a given opportunity; 

and a privileged ID output section for delivering the extracted privileged ID. 

Claim 55 (Currently Amended): A tag privacy protection method for preventing 
privacy information of a user from being acquired from information which is delivered from 
a tag device, in which a key ID and a key aro otorod in a key memory in a mann e r r e lating to 
each oth e r, the tag d e vice comprises a privilog o d ID memory including a r o ad only region in 
which a k e y ID io otorod and a rowritablo region in which a first privileged ID io stored ; 
comprising: th e st e ps of 

the tag device 

extracting athe key ID from a read-only region of a privileged ID memory of a tag 
device and extracting aand-the first privileged ID from a rewritable region of the privileged 
ID memory of the tag device by a read/write action of the tag device, the first privileged ID 
being an encrypted text of tag ID information, th e encrypted text encrypted with a key 

specified by the key ID ; 

and-delivering the extracted key ID and the_first privileged ID to an updater from a 
first output section of the tag device, the updater apparatus having a key m emory storing a 
key ID and a key in a manner relating to each other ; 

th e updat e r 

accepting the key ID and the first privileged ID as inputs at a first input section_ofthe 
updater ; 
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extracting a key which corresponds to the key ID which is input to the first input 
section from the key memory by a first key extractor of the updater ; 

updating the first privileged ID to rn* a second privileged ID, the second privileged ID 
being a new encrypted text of the tag ID information corresponding to the first privileged ID, 
the new encrypted text encrypted with th e a s sociation of which with th e first privileged ID is 
difficult to follow, using the key extracted by the first key extractor^ and th e first privil e g e d 
ID which is input to the first input s e ction in a privileged ID updating section of the updater ; 

end-delivering the second privileged ID from a second output section; 

the tag d e vice further 

accepting an input of the second privileged ID at a second input section of the tag 
device ; and 

the r e ad/write s e ction storing the second privileged ID in the rewritable region of the 
privileged ID memory. 

Claim 56 (Currently Amended): A tag privacy protection method according to Claim 
55, further comprising: th e s t e ps of 

th e updat e r additionally including a v e rification information generator which 
generateings a verification information for the second privileged ID in a verification 
information generator of the updater apparatus ; 

the second output section of the updater delivering the second privileged ID and the 
verification information from the second output section of the updater ; 

th e se cond input s ection of th e tag d e vic e accepting the second privileged ID and the 
verification information as inputs at the second input s ection of the tag device; 

the road/write section of the tag device storing the second privileged ID and the 
verification information in the rewritable region the of privileged ID memory. 
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Claim 57 (Currently Amended): A tag privacy protection method according to Claim 
55, further comprising! th e st e ps of 

th e r e ad/writ e s e ction of the tag d e vic e extracting the key ID from the read-only 
region of the privileged ID memory and extracting thea first or second third-privileged ID 
from the rewritable region by the read/write section of the tag devices 

th e first output s e ction of th e tag d e vic e delivering the extracted key ID and the first 
or second third-privileged ID to a decrypto r from the first output section of the tag device ; 

the decryptor 

accepting the key ID and the first or second privileged ID as inputs at a third input 
section of the decryptor ; 

extracting a key which corresponds to the key ID which is accepted by the third input 
section as an input from the key memory by a second key extractor of the decryptor; 

decrypting the first or second privileged ID with calculating an ID using th e 
privil e g e d ID which is input to the third input s e ction and the key extracted by the second key 
extractor of the decryptor to calculate the tag ID information in an ID calculator; 

and verifying the structure of the calculated tag ID information by an ID structure 
veri fi er of the decryptor . 

Claim 58 (Currently Amended): A tag device for use in an automatic tag 
identification system comprising 

a privileged ID memory including a read-only region in which a key ID is stored and 
a rewritable region in which a first privileged ID is stored , the first privileged ID being an 
encrypted text of tag ID information, the encrypted text encrypted with a key specified by the 
key ID ; 
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a read/write section for extracting the key ID and the first privileged ID from the 
privileged ID memory; 

a first output section for delivering the key ID and the first privileged ID which are 
extracted; and 

and-a second input section for accepting an input of a second privileged ID, the 
second privileged ID being a new encrypted text of the tag ID information corresponding to 
the first privileged ID. the new encrypted text encrypted with the key specified by the key ID, 
the first privileged ID differing from the second privileged ID th e a s sociation of which with 
the first privil e g e d ID i s difficult to follow ; 

wherein the read/write section storing the second privileged ID which is input in the 
rewritable region of the privileged ID memory. 

Claim 59 (Original): A tag device according to Claim 58 in which the second input 
section additionally accepts an input of verification information for the second privileged ID 
and the read/write section additionally stores the verification information which is input in 
the rewritable region of the privileged ID memory. 

Claim 60 (Currently Amended): A tag device according to Claim 58 in which each of 
the first and second privileged ID is encrypted text of r e pres e nt information which i s part of 
information constituting the tag ID information, the part of the tag ID information bein g an4D 
and which is inherent to each tag device , which is privileged alon e. 

Claim 61 (Original): A tag device according to Claim 58 in which an identical key ID 
is allocated to unrelated tag devices. 
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Claims 62-65 (Cancelled). 

Claim 66 (Original): A computer readable record medium storing a tag program 
which enables a computer to function as a tag device according to one of Claims 17, 54 and 
58. 

Claim 67 (Original): A computer readable record medium storing a tag program 
which enables a computer to function as a backend apparatus according to Claim 1 8. 

Claim 68 (Original): A computer readable record medium storing an update program 
which enables a computer to function as an updater according to one of Claims 48 to 5 1 . 

Claim 69 (Original): A computer readable record medium storing an update soliciting 
program which enables a computer to function as an update solicitor according to Claim 53. 
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